Examples of net.sf.collabreview.core.users.Author.authenticate()

net.sf.collabreview.core.users.Author.authenticate()

Log this user in which puts this user into "authenticated" mode. The "authenticated" status is transient, i.e. it is not stored in the persistent store.

If the password is not set (null) for an Author then he may no log in.

If this Author uses encrypted passwords then this method takes a plain-text password and compares it to the encrypted one.

Best practice: if you want to create a password encrypting Author then you should override this method and call this super method from your subclass with the then encrypted password. This method compares the input password to the stored encrypted password. @param password the password that the user is trying to log in with. If this is null then authentication should always fail. @return true iff authentication was successful

      if (auth == null) {
        logger.debug("login data missing");
        throw new IllegalArgumentException("login data missing");
      }
      author = CollabReviewSingleton.get().getAuthorManager().getAuthor(auth.getUserName());
      author.authenticate(auth.getPassword());
    } else {
      // wait a moment to reduce risk of brute force attacks
      try {
        Thread.sleep(500);
      } catch (InterruptedException e) {

        Thread.sleep(500);
      } catch (InterruptedException e) {
      }
      logger.debug("Login attempt: " + accountName);
      author = CollabReviewSingleton.get().getAuthorManager().getAuthor(accountName);
      author.authenticate(password);
      auth = new SessionAuthentication(accountName, password);
    }
    if (!author.isAuthenticated()) {
      logger.warn("Authentication failed for user " + accountName);
      throw new IllegalArgumentException("login failed");

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.